How do I restrict home folders in group policy based on a computer?

Basically my problem is, I am using a couple external harddrives as cheap offsite backup. And everytime I try to plug in a drive it trys to give it the address of H: which happens to be set as a drive map to the home folder for all users. I was wondering if there was a way in active directory to not allow mapped drives on a machine, or to disable home folders on a machine.

You can do this with a GPO...
Configure the settings in GP User Configuration\Administrative Templates\Windows Components\Windows Explorer. Remove "Map Network Drive" and "Disconnect Network Drive".

This will remove the Map Network Drive and Disconnect Network Drive commands from the toolbar and Tools menus in Explorer and My Network Places and removes these commands from menus that appear when you right-click the Windows Explorer or My Network Places icons

If you are wanting to disable the H mapping on one machine every time you log in, you can set up a logon script which has a "if computername = whatever" type logic and then disconnect the mapped drive. This is done differently in batch, vbscript, etc, so knowing your logon script language would be needed here. That is the quick, ugly fix.

You can add that machine to an AD security group and then link a logon script to that group to accomplish the same thing.

What you cannot do is set up a GPO inside AD which tells a computer "drive letter H is unavailable for network mapping but ok for removable media".

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

Featured Post

Administration of Active Directory does not have to be hard. Too often what should be a simple task is made more difficult than it needs to be.The solution? Hyena from SystemTools Software. With ease-of-use as well as powerful importing and bulk updating capabilities.